$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: 5OUk5ZCJ4Hsqi0siaqAwW4oD/2xnpNJDmCqxiGtNuuA= Subject key identifier: 0E:44:67:18:19:BD:0E:99:3D:F5:5C:70:7C:95:59:0D:74:50:08:76 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 4E7B53BD33505C67ACCBB5EE5731EB4E0638BC33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 25 Signing time: Sat 14 Jun 2025 19:41:33 +0000 Manifest this update: Sat 14 Jun 2025 19:36:33 +0000 Manifest next update: Wed 18 Jun 2025 01:29:33 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: 4xlEGiImVjw6Wh1qr1PR7cN5M9iS0TGB17AV88Whwt0=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: D+JQCz3+j+wwVLgvW5xdKrECzq+QJKVH4ZaDUGKOTUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7b:53:bd:33:50:5c:67:ac:cb:b5:ee:57:31:eb:4e:06:38:bc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Jun 14 19:36:33 2025 GMT Not After : Jun 18 01:29:33 2025 GMT Subject: CN=0E44671819BD0E993DF55C707C95590D74500876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:ed:40:ed:cf:0f:63:fb:eb:9c:f5:32:79: da:d4:c7:99:68:d1:30:25:1e:58:a5:b7:5b:f2:98: 82:11:0c:4f:9e:5a:40:c7:5c:a1:c0:eb:b3:ed:75: 29:10:1d:dc:36:ff:99:06:87:56:63:81:d7:f9:cb: a0:ff:60:84:fa:66:25:17:0d:6e:80:89:a1:6d:2f: ae:fe:04:e4:40:25:f2:c2:10:c9:df:f1:39:17:35: e7:1c:57:b3:a2:46:68:81:41:c7:b0:a4:d1:cc:d4: bf:ef:aa:57:f9:14:1a:63:78:50:8f:5d:6c:72:d6: 8b:86:36:44:69:5e:f7:ba:a1:7d:43:4e:29:f3:95: 8b:39:53:3e:40:aa:ac:d4:5a:fc:42:a5:e4:6a:86: cb:64:57:c5:ce:e5:4a:0c:d1:2a:c1:43:35:1a:45: 43:04:22:d3:bb:ad:26:05:30:d9:6a:09:f3:a3:1d: 90:1a:81:8b:0c:d0:f2:12:ad:bb:13:5c:d9:bb:45: 22:80:f0:d8:5c:9b:d9:41:16:b5:35:c5:52:b7:17: 49:50:bc:66:b6:a4:35:97:84:83:66:85:ec:0e:a7: 81:64:54:76:16:96:ba:66:98:0a:ef:3c:55:10:ad: 07:c7:f4:7f:75:29:aa:a7:69:f1:1d:c3:43:67:1a: bf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:44:67:18:19:BD:0E:99:3D:F5:5C:70:7C:95:59:0D:74:50:08:76 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:84:79:14:ea:8c:81:a5:a4:23:5b:8f:8a:17:1b:9b:f2:00: c2:ae:68:24:05:d3:bc:d0:2b:b9:6c:a8:ab:a1:a0:c8:a7:45: df:09:aa:6d:20:ae:c7:05:f3:6f:68:96:d2:e1:c9:f4:c2:67: c2:56:e7:8c:1d:97:db:82:47:2e:5a:6e:9e:78:5f:63:84:e5: 27:93:a8:6c:78:c8:87:18:0d:d0:ac:b4:d3:3f:b2:bd:00:e7: cb:2c:bf:5e:38:af:b1:7a:3d:ea:3d:66:7a:eb:c3:76:a4:62: f8:c9:ab:51:ba:39:1f:39:3e:65:a6:2a:37:8c:b2:14:e1:c5: ff:52:65:2e:41:cd:f3:f7:8d:74:2f:b8:64:50:dc:f3:80:02: 10:23:7d:f9:07:85:bf:18:6d:c7:96:9f:2c:6d:7d:8e:48:c5: 4b:71:df:56:5d:1f:8d:94:fb:b3:c7:87:45:e5:1c:4b:6c:07: 2c:db:e9:b5:6b:4e:ee:75:1b:45:cc:63:8f:76:67:9d:56:19: 58:e1:e4:2c:7d:93:ef:56:2e:c7:cc:f7:99:4b:90:12:42:f7: ee:83:3a:16:35:f5:c1:fa:dc:51:89:a4:21:f0:43:e0:40:3a: cf:d1:53:b3:f3:77:8d:8d:38:f1:da:45:01:27:25:23:a7:e0: c4:26:35:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTntTvTNQXGesy7XuVzHrTgY4vDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNTA2MTQxOTM2MzNaFw0yNTA2MTgwMTI5MzNaMDMxMTAvBgNV BAMTKDBFNDQ2NzE4MTlCRDBFOTkzREY1NUM3MDdDOTU1OTBENzQ1MDA4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxO1A7c8PY/vrnPUyedrUx5lo 0TAlHlilt1vymIIRDE+eWkDHXKHA67PtdSkQHdw2/5kGh1Zjgdf5y6D/YIT6ZiUX DW6AiaFtL67+BORAJfLCEMnf8TkXNeccV7OiRmiBQcewpNHM1L/vqlf5FBpjeFCP XWxy1ouGNkRpXve6oX1DTinzlYs5Uz5AqqzUWvxCpeRqhstkV8XO5UoM0SrBQzUa RUMEItO7rSYFMNlqCfOjHZAagYsM0PISrbsTXNm7RSKA8Nhcm9lBFrU1xVK3F0lQ vGa2pDWXhINmhewOp4FkVHYWlrpmmArvPFUQrQfH9H91KaqnafEdw0NnGr9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDkRnGBm9Dpk99VxwfJVZDXRQCHYwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASEeRTqjIGlpCNbj4oXG5vyAMKuaCQF07zQ K7lsqKuhoMinRd8Jqm0grscF829oltLhyfTCZ8JW54wdl9uCRy5abp54X2OE5SeT qGx4yIcYDdCstNM/sr0A58ssv144r7F6Peo9Znrrw3akYvjJq1G6OR85PmWmKjeM shThxf9SZS5BzfP3jXQvuGRQ3POAAhAjffkHhb8YbceWnyxtfY5IxUtx31ZdH42U +7PHh0XlHEtsByzb6bVrTu51G0XMY492Z51WGVjh5Cx9k+9WLsfM95lLkBJC9+6D OhY19cH63FGJpCHwQ+BAOs/RU7Pzd42NOPHaRQEnJSOn4MQmNUM= -----END CERTIFICATE-----Generated at Mon Jun 16 03:22:32 2025 by rpki-client